EAST Search History 



Ref 
# 


Hits 


Search Query 


DBs 


Default 
Operate 
r 


Plural 
s 


Time Stamp 


LI 


491 


717/141 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:38 


L2 


120 


717/142 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:38 


L3 


447 


717/143 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

. TT"> H K /"PT\ 1~> 

; IBM_TDB 


OR 


ON 


2007/02/20 
08:38 


L5 


1693 


713/182 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:40 


L6 


543 


713/183 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:40 


L7 


422 


713/184 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:40 


L8 


872 


713/185 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:40 


L9 


31 


(LI or L2 or L3 or L5 or L6 or 
L7 or L8) and (common adj 
password) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

. T T~> n yT npi-vTD 

; IBM_IDB 


OR 


ON 


2007/02/20 
08:41 


L10 


0 


(LI or L2 or L3 or L5 or L6 or 
L7 or L8) and (common adj 
password) and ((multiple or 
plural or several or many) adj 
(rule or syntax)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:42 


Lll 


0 


(LI or L2 or L3 or L5 or L6 or 
L7 or L8) and (universal adj 
password) and ((multiple or 
plural or several or many) adj 
(rule or syntax)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM TDB 


OR 


ON 


2007/02/20 
08:42 
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L12 


0 


(LI or L2 or L3 or L5 or L6 or 
L7 or L8) and ((common or 
universal) adj password) and 
((multiple or plural or several 
or many) adj (requirement)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

, IdM_IUi5 


OR 


ON 


2007/02/20 
08:43 


L13 


0 


(LI or L2 or L3 or L5 or L6 or 
L7 or L8) and ((common or 
universal) adj password) and 
((multiple or plural or several 

or manyj acy ^vaiiajj 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

. TDM TFlR 

, lolvi_ 1 UD 


OR 


ON 


2007/02/20 
08:43 


L14 


0 


(LI or L2 or L3 or L5 or L6 or 
L7 or L8) and ((common or 
universal) adj password) and 
((multiple or plural or several 
or many) adj (valid$6)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

, 1dIVI_1JJd 


OR 


ON 


2007/02/20 
08:44 


L15 


1 


((common or universal) adj 
password) and ((multiple or 
plural or several or many) adj 
(valid$6 or rule or syntax or 
requirement)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; 1BM_1DB 


OR 


ON 


2007/02/20 
08:49 


L16 


13 


(cragun.in. and brian.in.) and 
password 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:51 


L17 


2 


(cragun.in. and brian.in.) and 
((password or syntax) near3 
valid$6) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:52 


L18 


1 


(hintermeister.in, and gregory. 
in.) and ((password or syntax) 
near3 valid$6) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2007/02/20 
08:52 


SI 


5597 


visual adj feedback 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/12/19 
11:08 


S2 


0 


(visual adj feedback) near3 
string 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
, ltSM_l IJd 


OR 


ON 


2005/06/23 
09:32 


S3 


12 


(visual adj feedback) with 
string 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM TDB 


OR 


ON 


2005/06/23 
09:38 
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S4 


88 


(visual adj feedback) with 
character 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

. TT~> TV /T nPT\T~> 

; IBM_TDB 


OR 


ON 


2005/06/23 
09:38 


S5 


34 


(visual adj feedback) near3 
character 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
10:22 


S6 


3 


(visual adj feedback) near3 
password 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 

. TDHJT 

; IBM_TDB 


OR 


ON 


2005/06/23 
10:23 


S7 


38 


(visual adj feedback) near3 
valid$8 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
10:26 


S8 


4246 


password near3 valid$8 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
10:26 


S9 


9 


(password near3 valid$8) with 
(continuous or simultaneous) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
10:29 


S10 


26 


(password near3 feedback) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
10:36 


Sll 


59 


(password near3 visual) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
10:49 


S12 


469 


(valid$8 near3 feedback) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
, lt3JVl_IIJO 


OR 


ON 


2005/06/23 
10:49 


S13 


3 


(valid$8 near3 feedback) with 
password 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM TDB 


OR 


ON 


2005/06/23 
10:55 
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S14 


3 


(visual near3 confirmation) 
with password 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:11 


S15 


71 


password near3 instant 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:13 


S16 


62 


password with (enter near3 
(lack$4 or no or "not")) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:17 


S17 


611 


password with dynamic$5 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:17 


S18 


1 


password with ((dynamic$5 or 
runtime) near3 feedback) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBMJTDB 


OR 


ON 


2005/06/23 
13:18 


S19 


78 


password with ((dynamic$5 or 
runtime) near3 (valid$8 or 
confirm$8 or authentic$8 or 
verif$6)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:20 


S20 


26 


password with ((visual$4) 
near3 (valid$8 or confirm$8 or 
authentic$8 or verif$6)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:30 


S21 


370 


combin$3 near3 password 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBMJTDB 


OR 


ON 


2005/06/23 
13:31 


S22 


1 


(combin$3 near3 password) 
with visual$4 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; 1dM_TDd 


OR 


ON 


2005/06/23 
13:32 


S23 


0 


password with (iterat$5 near3 
feedback) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM TDB 


OR 


ON 


2005/06/23 
13:33 
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S24 


7 


password with (iterat$5 near3 
(validat$8 or verif$8 or 
confirm$8 or authentic$8)) 


US-PGPUB 
; USPAT; 
EPO; JPO; 
DERWENT 
; IBM_TDB 


OR 


ON 


2005/06/23 
13:34 


S25 


14 


("5073933" | "5349642" | 
"5418854" | "5421006" | 
"5491752" | "5497421" | 
5594921 1 5606614 | 
"5638513" | "5652793" | 
"5751812" | "5771287" j 
"5774552" | "5784560").PN. 


US-PGPUB 
; USPAT; 
USOCR 


OR 


ON 


2005/06/23 
13:40 


S26 


11 


("5892828").URPN. 


USPAT 


OR 


ON 


2005/06/23 
13:55 


S27 


0 


(password near3 validation) 
with ((multiple or plural$6 or 
several or many) near3 (file or 
database or resource or 
program or application or 
code)) 


USPAT 


OR 


ON 


2005/06/23 
13:58 
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1 A framework for password-based authenticated key exchange 1 
Rosario Gennaro, Yehuda Lindell 

May 2006 ACM Transactions on Information and System Security (TISSEC), volume 9 

Issue 2 
Publisher: ACM Press 

Full text available: ^pdf(574.64 KB) Additional Information: full citation , abstract , references , index terms 

In this paper, we present a general framework for password-based authenticated key 
exchange protocols, in the common reference string model. Our protocol is actually an 
abstraction of the key exchange protocol of Katz et al. and is based on the recently 
introduced notion of smooth projective hashing by Cramer and Shoup. We gain a number 
of benefits from this abstraction. First, we obtain a modular protocol that can be described 
using just three high-level cryptographic tools. This allows a simpl ... 

Keywords: Passwords, authentication, dictionary attack, projective hash functions 



2 Password cracking: a game of wits 
Donn Seeley 

June 1989 Communications of the ACM, volume 32 issue 6 
Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 
terms , review 



Full text available: fg l pdf(488.03 KB) 



The following report has been gleaned from "A Tour of the Worm," an in-depth account of 
the November Internet infection. The author found the worm's crypt algorithm a 
frustrating, yet engaging, puzzle. 

3 The universe model: an approach for improving the modularity and reliability of 
^ concurrent programs 
^ Reimer Behrends, R. E. Kurt Stirewalt 

November 2000 ACM SIGSOFT Software Engineering Notes , Proceedings of the 8th 
ACM SIGSOFT international symposium on Foundations of software 
engineering: twenty-first century applications SIGSOFT '00/FSE-8, 
Volume 25 Issue 6 
Publisher: ACM Press 

Full text available: ^ pdf(1.08 MB ) Additional Information: full citation , abstract , references , index terms 
We present the universe model, a new approach to concurrency management that isolates 
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concurrency concerns and represents them in the modular interface of a component. This 
approach improves program comprehension, module composition, and reliability for 
concurrent systems. The model is founded on designer-specified invariant properties, 
which declare a component's dependencies on other concurrent components. Process 
scheduling is then automatically derived from these invariants. We illustrate ... 

Keywords: component-based software engineering, distributed and parallel systems, 
reliability, software architecture 



Risks of passwords 
Peter G. Neumann 

April 1994 Communications of the ACM, volume 37 issue 4 
Publisher: ACM Press 

Full text available: 1p| pdf(839.23 KB) Additional Information: full citation , references , citin gs, index terms 



Authentication using gra phical passwor ds: effects of tolerance and image choice 
Susan Wiedenbeck, Jim Waters, Jean-Camille Birget, Alex Brodskiy, Nasir Memon 
July 2005 Proceedings of the 2005 symposium on Usable privacy and security 

SOUPS '05 
Publisher: ACM Press 

Full text available:1 jg|pdf(555.83 KB) Additional Information: full citation , abstract, references , dtinfls, index 
^ terms 

Graphical passwords are an alternative to alphanumeric passwords in which users click on 
images to authenticate themselves rather than type alphanumeric strings. We have 
developed one such system, called PassPoints, and evaluated it with human users. The 
results of the evaluation were promising with respect to rmemorability of the graphical 
password. In this study we expand our human factors testing by studying two issues: the 
effect of tolerance, or margin of error, in clicking on the password ... 

Keywords: PassPoints, authentication, graphical passwords, human factors, password 
images, password security, tolerance, usable security 



6 Public-key cryptogra phy and password protocols: the multi-user case 
Maurizio Kliban Boyarsky 

November 1999 Proceedings of the 6th ACM conference on Computer and 
communications security CCS '99 

Publisher: ACM Press 

Full text available: ISpdfd.OO MB) Additional Information: Mcitation, abstract, references, cjtjngs, index 
^ terms 

The problem of password authentication over an insecure network when the user holds 
only a human-memorizable password has received much attention in the literature. The 
first rigorous treatment was provided by Halevi and Krawczyk, who studied off-line 
password guessing attacks in the scenario in which the authentication server possesses a 
pair of private and public keys. In this work we: Show the inadequacy of both the HK 
formalization and protocol in the ... 



. 7 On secure and pseudonymous client-relationships with multiple servers 
Eran Gabber, Phillip B. Gibbons, David M. Kristol, Yossi Matias, Alain Mayer 
November 1999 ACM Transactions on Information and System Security (TISSEC), 

Volume 2 Issue 4 
Publisher: ACM Press 
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Full text available:^ pdf(161.56 KB) Additional Information: full citation , abstract , references , citings , index 

terms , review 

This paper introduces a cryptographic engine, Janus, which assists clients in establishing 
and maintaining secure and pseudonymous relationships with multiple servers. The setting 
is such that clients reside on a particular subnet (e.g., corporate intranet, ISP) and the 
servers reside anywhere on the Internet. The Janus engine allows each client-server 
relationship to use either weak or strong authentication on each interaction. At the same 
time, each interaction preserves privacy by neithe ... 

Keywords: Janus function, anonymity, mailbox, persistent relationship, privacy, 
pseudonym 



Identity verification (a uthenti cation ) workin g g rou p 
Tom Berson, P. Capek, J. Schweitzer, C. Weissman 
April 1988 ACM SIGSAC Review, volume 6 issue l 
Publisher: ACM Press 

Full text available: ^ pdf(803.95 KB) Additional Information: full citation , abstract , index terms 

Every reader of this report has at some time verified his or her identity to a computer 
system. Entry of a userid and password in response to computer prompting is the almost 
universal model for this simple but essential act. 

Consistent, yet anonymous. Web access with LPWA 
Eran Gabber, Phillip B. Gibbons, David M. Kristol, Yossi Matias, Alain Mayer 
February 1999 Communications of the ACM, Volume 42 Issue 2 
Publisher: ACM Press 

Full text available: fiQ pdf(207,80 KB) 

fi" , ~ n ^ , ' Additional Information: full citation , references , citings, index terms 
Eg html(30.92 KB) ~ 



10 The failure of anti-hacking legislation: a Hong Kong perspective 
Rynson W. H. Lau, Kwok-Yan Lam, Siu-Leung Cheung 

January 1996 Proceedings of the 3rd ACM conference on Computer and 

communications security CCS '96 
Publisher: ACM Press 

Full text available:^ pdf(765.01 KB) Additional Information: full citation , references , index terms 



11 There's gold in them thar networks! or searching for treasure in all the wrong places Q 
^ Jerry Martin 

November 1993 Proceedings of the 21st annual ACM SIGUCCS conference on User 

services SIGUCCS '93 
Publisher: ACM Press 

Full text available: ^ p df (1 .60 MB ) Additional Information: full citation , index terms 



There's gold in them thar networks!: or searching for treasure in all the wrong places B 
Jerry Martin 

December 1992 Proceedings of the 20th annual ACM SIGUCCS conference on User 

services SIGUCCS '92 
Publisher: ACM Press 

Full text available: Additional Information: 
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13 The domino effect of password reuse 
Blake Ives, Kenneth R. Walsh, Helmut Schneider 
April 2004 Communications of the ACM, volume 47 issue 4 
Publisher: ACM Press 

Full text available: Qpdf(1 00.88 KB) Additional Information: full citation , abstract , references , citings, index 
Eg html(23.20 KB) terms 

One weak spot is all it takes to open secured digital doors and online accounts causing 
untold damage and consequences. 

14 The trouble with login: on usability and computer security in ubiquitous computing 
E. Bardram 

November 2005 Personal and Ubiquitous Computing, Volume 9 issue 6 
Publisher: Springer-Verlag 

Full text available: ^ pdf(439.96 KB) Additional Information: fuli citation , abstract , index terms 

Logging in by typing usernames and passwords is by far the most common way to access 
modern computer systems. However, such contemporary user authentication mechanisms 
are inappropriate in a ubiquitous computing environment, where users constantly are 
accessing a wide range of different devices. This paper introduces new concepts for user 
authentication in ubiquitous computing, such as the notion of proximity-based user 
authentication and silent login. The design of these new mecha ... 

Keywords: Activity-based computing (ABC), Computer-supported cooperative work 
(CSCW), Electronic patient record (EPR), Healthcare, Hospitals, Login, Ubiquitous 
computing, User authentication 



15 Understanding differences in ethical beliefs and behaviors toward software co p yin g: 
^ the effects of organization culture 
^ Diane Lending> Sandra A. Slaughter 

April 1999 Proceedings of the 1999 ACM SIGCPR conference on Computer personnel 
research SIGCPR '99 

Publisher: ACM Press 

Full text available: Qpdf(978.26 KB) Additional Information: full citation , references , index terms 



Keywords: computer crime, computer education and training, management of 
information systems, software ethics, software piracy 



16 Identification control: Owner-controlled information 

# Carrie Gates, Jacob Slonim 
August 2003 Proceedings of the 2003 workshop on New security paradigms NSPW 
-03 

Publisher: ACM Press 

Full text available: Q pdf(1 .06 MB) Additional Information: full citation , abstract , references 

Information about individuals is currently maintained in many thousands of databases, 
with much of that information, such as name and address, replicated across multiple 
databases. However, this proliferation of personal information raises issues of privacy for 
the individual, as well as maintenance issues in terms of the accuracy of the information. 
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Ideally, each individual would own, maintain and control his personal information, allowing 
access to those who needed at the time it was needed. 0 ... 

Keywords: architecture, privacy, security 



17 Lessons from the UNIX breakins at Stanford 
Brian Reid 

October 1986 ACM SIGSOFT Software Engineering Notes, volume n issue 5 
Publisher: ACM Press 

Full text available: jf| pdf(635.16 KB) Additional Information: full citation , citings , index terms 



18 Emperor: cheap legal secure cryptography for the Web 
Clifton Davis, Christoph F. Eick 

February 1999 Proceedings of the 1999 ACM symposium on Applied computing SAC 
- 99 

Publisher: ACM Press 

Full text available: S pdf(864.94 KB) Additional Information: full citation , references , index terms 



Keywords: Web security, distributed source cryptography, electronic commerce, public 
key cryptography 



19 Columns: ACM fellow profile: Ro g er Needham 
Tope Omitol 

January 2001 ACM SIGSOFT Software Engineering Notes, Volume 26 issue l 
Publisher: ACM Press 

Full text available: 1p | pdf(542.Q8 KB) Additional Information: full citation 



20 Stalkin g the wily hacker 
Clifford Stoll 

May 1988 Communications of the ACM, volume 31 issue 5 
Publisher: ACM Press 

Full text available: 1j Bpdf(1.60 MB) Additional Information: full citation , abstract, references, citings, index 
. i^j h terms 

An astronomer-turned-sleuth traces a German trespasser on our military networks, who 
slipped through operating system security holes and browsed through sensitive databases. 
Was it espionage? 
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User authentication through keystroke dynamics 
Francesco Bergadano, Daniele Gunetti, Claudia Picardi 

November 2002 ACM Transactions on Information and System Security (TISSEC), 

Volume 5 Issue 4 
Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 
terms , review 



Full text available: pdf(351 .02 KB) 



Unlike other access control systems based on biometric features, keystroke analysis has 
not led to techniques providing an acceptable level of accuracy. The reason is probably the 
intrinsic variability of typing dynamics, versus other— very stable— biometric 
characteristics, such as face or fingerprint patterns. In this paper we present an original 
measure for keystroke dynamics that limits the instability of this biometric feature. We 
have tested our approach on 154 individuals, achieving a F ... 



Keywords: Biometric techniques, keystroke analysis 



2 Attacking passwords and bringing down the network: Fast dictionary attacks on 
|^ passwords using time-space tradeoff 
^ Arvind Narayanan, Vitaly Shmatikov 

November 2005 Proceedings of the 12th ACM conference on Computer and 
communications security CCS '05 

Publisher: ACM Press 

Full text available- IB DdfM 89 89 KB) Additional Information: full citation, atetract, references, citings, index 
' \£> y -- x ! J terms 

Human-memorable passwords are a mainstay of computer security. To decrease 
vulnerability of passwords to bruterforce dictionary attacks, many organizations enforce 
complicated password-creation rules and require that passwords include numerals and 
special characters. We demonstrate that as long as passwords remain human-memorable, 
they are vulnerable to "smart-dictionary" attacks even when the space of potential 
passwords is large. Our first insight is that the distribution of letters in easy-to- ... 

Keywords: Markov models, cryptanalysis, dictionary attack, passwords, time-space, 
tradeoff 
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